$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/b6b453e7-5d2f-37fc-93ba-dac96781d0b3.roa File: b6b453e7-5d2f-37fc-93ba-dac96781d0b3.roa (raw, json) Hash identifier: 4iCdOxgUHmWbyZItBJY8bbihA8E+rj5hJKdPtfaW5/Q= Subject key identifier: 63:F8:7D:81:BC:36:A5:19:41:E7:0F:67:BF:3C:31:85:C2:BC:79:E8 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584F4972E513DAA089F28FC29E00 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/b6b453e7-5d2f-37fc-93ba-dac96781d0b3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11404 IP address blocks: 209.236.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:e5:13:da:a0:89:f2:8f:c2:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=96702ae4-9654-4d7e-97db-2a4954bbdc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2e:60:54:17:8b:62:ef:11:f9:40:c3:65:84: ef:bc:e6:9e:17:14:da:1c:13:ab:df:41:8f:10:8b: 81:13:67:29:8b:74:9b:64:74:e4:8d:60:c7:31:85: e7:01:08:b1:8b:d9:78:89:b4:b7:d0:2b:57:f4:34: f9:b7:d9:d9:c1:8d:86:0c:d7:7d:77:30:df:ed:84: 22:a3:27:85:a7:6e:ce:5d:57:a9:cb:9f:31:48:9d: 59:2a:84:26:70:93:bc:19:e3:95:7a:65:39:fd:5f: b0:a8:5e:e0:5e:cf:5d:0d:30:04:92:46:89:8c:3e: ad:cb:30:41:8a:40:ba:04:c8:9c:88:c2:80:e5:89: 8b:f5:af:73:d8:88:03:15:56:28:54:ab:1d:ba:3b: 48:ad:b2:bf:d9:1a:97:97:3b:73:00:1e:db:60:da: ed:fb:2a:33:c8:8a:00:54:50:2d:5f:cd:38:b7:cb: fa:36:34:be:c4:65:0b:1f:7b:9e:65:08:65:64:ed: d7:31:7d:87:1b:1a:15:6f:ad:9f:1a:e7:17:b2:c2: b6:92:d0:c0:a1:45:6e:09:9a:52:eb:39:dc:60:5d: b7:1c:37:99:57:96:dd:31:28:d0:dc:37:d8:26:08: 32:ce:72:d0:db:98:f4:55:01:c1:60:d8:cd:55:cb: 0c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F8:7D:81:BC:36:A5:19:41:E7:0F:67:BF:3C:31:85:C2:BC:79:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/b6b453e7-5d2f-37fc-93ba-dac96781d0b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:01:7c:3f:0b:1d:48:22:58:dc:9b:bb:63:9a:08:2c:41:14: d2:2c:8c:9e:6c:17:ea:df:a9:ee:e4:e5:14:aa:29:ef:0d:be: c3:ac:e4:30:ee:49:b6:f3:c3:f0:1f:88:5a:b5:ee:18:b9:3a: bd:5a:1d:53:94:05:75:40:79:42:f8:3c:a0:57:a0:47:57:1f: 06:78:47:5a:10:e7:e6:d7:08:d1:dc:a4:96:10:7b:46:fb:2e: 30:50:3f:cc:44:03:02:58:a8:23:66:c5:6a:83:81:6d:61:47: 88:9f:bf:51:9f:2f:76:40:19:00:aa:2c:fb:78:f2:63:a3:9c: 20:61:ae:77:08:94:17:c5:ec:07:93:b2:88:00:1a:da:97:fb: e9:93:2e:f2:f6:db:a1:f4:b9:2d:9d:63:6a:29:3e:23:35:78: 74:47:05:de:05:14:7d:42:cb:b7:88:1d:1c:dc:7a:ee:68:66: e3:17:0b:bb:f9:14:a0:e1:3f:11:57:b4:05:83:98:e8:d4:c7: cf:f8:da:d3:e4:a3:73:b9:dc:24:6f:8c:49:73:a9:64:a8:9e: 77:64:79:3a:1e:69:63:37:43:36:46:cb:d0:26:09:c6:ca:d8: d0:f8:d1:ed:92:db:d4:b8:d2:46:5d:7c:88:eb:79:2a:90:0c: 3b:7b:d5:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcuUT2qCJ8o/CngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTY3MDJhZTQtOTY1NC00ZDdlLTk3ZGItMmE0OTU0YmJkYzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C5gVBeLYu8R+UDDZYTvvOaeFxTaHBOr30GP EIuBE2cpi3SbZHTkjWDHMYXnAQixi9l4ibS30CtX9DT5t9nZwY2GDNd9dzDf7YQi oyeFp27OXVepy58xSJ1ZKoQmcJO8GeOVemU5/V+wqF7gXs9dDTAEkkaJjD6tyzBB ikC6BMiciMKA5YmL9a9z2IgDFVYoVKsdujtIrbK/2RqXlztzAB7bYNrt+yozyIoA VFAtX804t8v6NjS+xGULH3ueZQhlZO3XMX2HGxoVb62fGucXssK2ktDAoUVuCZpS 6zncYF23HDeZV5bdMSjQ3DfYJggyznLQ25j0VQHBYNjNVcsMYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGP4fYG8NqUZQecPZ788MYXCvHnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYjZiNDUzZTctNWQyZi0z N2ZjLTkzYmEtZGFjOTY3ODFkMGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIBfD8LHUgiWNybu2OaCCxBFNIsjJ5sF+rfqe7k5RSqKe8NvsOs5DDu Sbbzw/AfiFq17hi5Or1aHVOUBXVAeUL4PKBXoEdXHwZ4R1oQ5+bXCNHcpJYQe0b7 LjBQP8xEAwJYqCNmxWqDgW1hR4ifv1GfL3ZAGQCqLPt48mOjnCBhrncIlBfF7AeT sogAGtqX++mTLvL226H0uS2dY2opPiM1eHRHBd4FFH1Cy7eIHRzceu5oZuMXC7v5 FKDhPxFXtAWDmOjUx8/42tPko3O53CRvjElzqWSonndkeToeaWM3QzZGy9AmCcbK 2ND40e2S29S40kZdfIjreSqQDDt71dE= -----END CERTIFICATE-----Generated at Mon Sep 28 14:20:40 2026 by rpki-client